atomic-threat-coverage/response_actions/RA_0019_identification_analyse_ms_office_file.yml
Yugoslavskiy Daniil e45e239c0c added IR stuff
2019-02-05 03:59:49 +01:00

15 lines
424 B
YAML

title: RA_0019_identification_analyse_ms_office_file
stage: identification
automation:
- thehive
author: Name Surname
creation_date: DD.MM.YYYY
references:
- https://example.com
description: >
Response Action for
workflow: |
Description of how to handle multiple Response Actions (if it is an aggregated Response Action) or workflow for single Response Action in markdown format.
Here newlines will be saved.